1. The University of Georgia

2. /1002 Ensure that the University is appropriately managing risk to information assets and information services.

3. People Security Awareness & Education Processes Comprehensive Policy System Risk Management Technology Electronic Measures to Safeguard Information Systems / 10 3

4. Security Awareness modules 10 Modules required for all employees No new requirements if completed in 2009 Training Program New IT Employees Security Training Student Awareness at Orientation What’s Next Renovation of awareness program for 2011 Shift from “what to know” to “what to do” / 10 4

6. Data Access Policy Authorization of access to Sensitive Data Limits use of data to only intended purposes Guidelines for Handling Sensitive Info Outlines responsible behavior for data handlers Guidelines for Trusted Computing Prudent measures for systems that store or process Sensitive Information / 10 6

7. Total Removed 5,049,488

8. Edge Firewall Protections Protect sensitive systems from Internet attack Protect workstations from Internet attack Limits administrative access to systems Security Technology Pilots Updated Virtual Private Network Technology Web-based Malware Filtering Endpoint Security Suite / 10 8

9. x Trend Micro SymantecNOD32 McAfeeLAN Desk F- Secure SophosFore- front Effectiveness 545425444 Management Interface 544445333 Performance 453534444 Customization 355443433 Reporting 554445143 Compatibility 345441321 Deployment 454542522 Multiple OS 235355551 Tech Support 454453333 Final Rating 158149144136133119116100 Initial Evaluation Data for Endpoint Security Products

10. / 10 10 Policy & Guidelines http://www.infosec.uga.edu/policies/index.p hp SSN removal resources https://infosec.uga.edu/sate/canthessn.php Technology Pilots https://infosec.uga.edu/TBD